1. In a computing system that includes one or more processors, persistent 
memory configured to store information that persists through power loss of the computing 
system, and system memory that may more directly accessed by the one or more processors, 
a method for recovering from a system failure, the method comprising the following: 

an act of receiving a message corresponding to a particular message transaction 
following a message exchange pattern; 

an act of loading state information for the message transaction from persistent 
memory to system memory in response to having received the message; 

an act of determining from the state information whether or not the processing 
instance associated with the particular message transaction is in recovery mode; and 

an act of branching process flow depending on whether or not the processing 
instance is in recovery mode. 



2. A method in accordance with Claim 1, wherein the act of determining from 
the state information whether or not the processing instance associated with the particular 
^ message transaction is in recovery mode comprises the following: 

an act of determining that the processing instance is in recovery mode. 
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following: 



O an act of executing recovery code. 



4. A method in accordance with Claim 3, further comprising the following: 
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after executing the recovery code, an act of determining that recovery has completed 
successfully. 



5. A method in accordance with Claim 4, further comprising the following: 
an act of causing the state information to reflect that the processing instance is no 
longer in recovery mode. 



6. A method in accordance with Claim 3, wherein the act of executing of the 
recover code comprises the following: 

an act of beginning execution of the recovery code; 

an act of determining that further communication is needed in order to fully recover; 
an act of storing the state information for the processing instance back into persistent 
memory upon determining that further communication is needed in order to fully recover; 
an act of receiving a second message; 

an act of reloading the state information from persistent memory to system memory 
^ in response to having received the second message; 

an act of continuing execution of the recovery code upon reloading the state 
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the state information whether or not the processing instance associated with the particular 



O transaction is in recovery mode comprises the following: 

an act of determining that the processing instance is in normal mode. 
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8. A method in accordance with Claim 7, wherein the act of branching process 
flow depending on whether or not the processing instance is in recovery mode comprises the 
following: 

an act of executing normal code without executing recovering code. 

9. A method in accordance with Claim 1, wherein the message is a first 
message, the message transaction is a first message transaction, the processing instance is a 
first processing instance, and the state information is first state information, the method 
further comprising the following: 

an act of receiving a second message of a second message transaction; 

an act of loading second state information for the second message transaction from 
persistent memory to system memory in response to having received the second message; 
and 

an act of determining from the second state information whether or not the 
processing instance associated with the second message is in recovery mode. 

10. A method in accordance with Claim 9, wherein the message exchange pattern 
is a first message exchange pattern, wherein the second message transaction is in accordance 
with a second message exchange pattern that is different than the first message exchange 
pattern. 

11. A method in accordance with Claim 9, wherein the second message 
transaction is in accordance with the message exchange pattern of the first message. 
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12. A method in accordance with Claim 9, wherein the first state information 
indicates that the first processing instance is in recovery mode, while at the same time the 
second state information indicates that the second processing instance in not in recovery 
mode. 

13. A method in accordance with Claim 1 , further comprising the following: 

an act of identifying a plurality of processing instances that were running at the time 
of a system failure; and 

an act of indicating in state information associated with each of the identified 
plurality of processing instances that the corresponding processing instance is in recovery 
mode, wherein the plurality of processing instances includes the processing instance. 
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14. A computer program product for use in a computing system that includes one 
or more processors, persistent memory configured to store information that persists through 
power loss of the computing system, and system memory that may more directly accessed 
by the one or more processors, a computer program product for implementing a method for 
recovering from a system failure, the computer program product comprising one or more 
computer-readable media having thereon computer-executable instructions that, when 
executing by the one or more processors, cause the computing system to perform the 
following: 

an act of detecting receipt of a message corresponding to a particular message 
transaction that follows a message exchange pattern; 

an act of loading state information for the message transaction from persistent 
memory to system memory in response to having received the message; 

an act of determining from the state information whether or not the processing 
instance associated with the particular message transaction is in recovery mode; and 

an act of branching process flow depending on whether or not the processing 
instance is in recovery mode. 

15. A computer program product in accordance with Claim 14, wherein the 
computer-executable instructions for performing the act of determining from the state 
information whether or not the processing instance associated with the particular message 
transaction is in recovery mode comprise computer-executable instructions that, when 
executed by the one or more processors, cause the computing system to perform the 
following: 

an act of determining that the processing instance is in recovery mode. 
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16. A computer program product in accordance with Claim 15, wherein the 
computer-executable instructions for performing the act of branching process flow 
depending on whether or not the processing instance is in recovery mode comprise 
computer-executable instructions that, when executed by the one or more processors, cause 
the computing system to perform the following: 

an act of executing recovery code. 

17. A computer program product in accordance with Claim 16, wherein the one 
or more computer-readable media further have thereon computer-executable instructions 
that, when executed by the one or more processors, cause the computing system to further 
perform the following: 

after executing the recovery code, an act of determining that recovery has completed 
successfully. 

18. A computer program product in accordance with Claim 17, wherein the one 
or more computer-readable media further have thereon computer-executable instructions 
that, when executed by the one or more processors, cause the computing system to further 
perform the following: 

an act of causing the state information to reflect that the processing instance is no 
longer in recovery mode. 

19. A computer program product in accordance with Claim 16, wherein the 
computer-executable instructions for perform the act of executing of the recover code 
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comprise computer-executable instructions that, when executed by the one or more 
processors, cause the computing system to perform the following: 
an act of beginning execution of the recovery code; 

an act of determining that further communication is needed in order to fully recover; 
an act of storing the state information for the processing instance back into persistent 
memory upon determining that further communication is needed in order to fully recover; 
an act of receiving a second message; 

an act of reloading the state information from persistent memory to system memory 
in response to having received the second message; 

an act of continuing execution of the recovery code upon reloading the state 
information. 



20. A computer program product in accordance with Claim 14, wherein the 

computer-executable instructions for performing the act of determining from the state 

information whether or not the processing instance associated with the particular message 

^ transaction is in recovery mode comprise computer-executable instructions that, when 
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21. A computer program product in accordance with Claim 20, wherein the 
O computer-executable instructions for performing the act of branching process flow 

depending on whether or not the processing instance is in recovery mode comprise 
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computer-executable instructions that, when executed by the one or more processors, cause 
the computing system to perform the following: 

an act of executing normal code without executing recovering code. 

22. A computer program product in accordance with Claim 14, wherein the 
message is a first message, the message transaction is a first message transaction, the 
processing instance is a first processing instance, and the state information is first state 
information, the one or more computer-readable media further having thereon computer- 
executable instructions that, when executed by the one or more processors, cause the 
computing system to perform the following: 

an act of detecting receipt of a second message of a second message exchange 

pattern; 

an act of loading second state information for the second message transaction from 
persistent memory to system memory in response to having received the second message; 
and 

an act of determining from the second state information whether or not the 
processing instance associated with the second message is in recovery mode. 

23. A computer program product in accordance with Claim 22, wherein the 
message exchange pattern is a first message exchange pattern, wherein the second message 
transaction is in accordance with a second message exchange pattern that is different than 
the first message exchange pattern. 
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24. A computer program product in accordance with Claim 22, wherein the 
second message transaction is in accordance with the message exchange pattern of the first 
message. 

25. A computer program product in accordance with Claim 22, wherein the first 
state information indicates that the first processing instance is in recovery mode, while at the 
same time the second state information indicates that the second processing instance in not 
in recovery mode. 

26. A computer program product in accordance with Claim 14, wherein the one 
or more computer-readable media further have thereon computer-executable instructions 
that, when executed by the one or more processors, cause the computing system to further 
perform the following: 

an act of identifying a plurality of processing instances that were running at the time 
of a system failure; and 

an act of indicating in state information associated with each of the identified 



plurality of processing instances that the corresponding processing instance is in recovery 




the one or more computer-readable media are physical memory media. 



mode, wherein the plurality of processing instances includes the processing instance. 



27. One or more computer-readable media in accordance with Claim 14, wherein 
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28. One or more computer-readable media in accordance with Claim 27, wherein 
the physical memory media is system memory. 
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29. One or more computer-readable media in accordance with Claim 27, wherein 
the physical memory media is persistent media. 
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30. In a computing system that includes one or more processors, persistent 
memory configured to store information that persists through power loss of the computing 
system, and system memory that may more directly accessed by the one or more processors, 
a method for recovering from a system failure, the method comprising the following: 

an act of detecting receipt of a message corresponding to a particular message 
transaction pattern that follows a message exchange pattern; and 

a step for identifying an operational mode of a processing instance corresponding to 
the particular message transaction. 



31. A method in accordance with Claim 30, wherein the step for identifying an 
operational mode of a processing instance corresponding to the particular message 
transaction comprises the following: 

an act of loading state information for the message transaction from persistent 
memory to system memory in response to having received the message; 

an act of determining from the state information whether or not the processing 

^ instance associated with the particular message transaction is in recovery mode; and 

S an act of branching process flow depending on whether or not the processing 

w * = 

ai jjj 1 35 §? 2 instance is in recovery mode. 

m p 3 g <§ ? 

n 2 H u h [" 

rn 8 < 5 k D . 

^ So ?$ O f- W 

Z( §85 
|< 35 

o 

3i 



- Page 30 - 



Docket No. 13768.472 



32. A computer program product for use in a computing system that includes one 
or more processors, persistent memory configured to store information that persists through 
power loss of the computing system, and system memory that may more directly accessed 
by the one or more processors, a computer program product for comprising one or more 
computer-readable media having thereon computer-executable instructions that, when 
executing by the one or more processors, cause the computing system to instantiate in the 
system memory the following: 

a plurality of processing instances, each associated with a particular message 
transaction, each processing instance being configured to load state information for the 
message transaction from persistent memory to system memory in response to having 
received a message for the message transaction, determine from the state information 
whether or not the processing instance associated with the particular message transaction is 
in recovery mode, and branch process flow depending on whether or not the processing 
instance is in recovery mode; and 

a recovery detection component configured to identify the plurality of processing 
instances as running at the time of a system failure; and indicating in state information 



associated with each of the identified plurality of processing instances that the 




corresponding processing instance is in recovery mode. 
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